Admissibility of Digital Evidence
Admissibility of Digital Evidence
of Digital
Evidence
Objectives
Definition:
Any information stored or transmitted in digital form that may be used in legal proceedings.
Examples:
Emails, text messages, social media posts.
Computer files, logs, and metadata.
Data from mobile devices, cloud services, and IoT devices.
Legal Framework
Relevance:
The evidence must be directly related to
the case.
Authenticity:
•Must be proven to be what it purports to
be.
Integrity:
Evidence must remain unchanged from the
time it was obtained.
Methods of
Testimony of a person who created or
witnessed the creation of the evidence.
Authentication:
Comparison with an authenticated reference.
Hash values to confirm integrity.
01 02 03 04
Use Write Create Hash Secure
Blockers: Forensic Verification: Storage:
Prevent Copies: Work Use MD5 or Protect
alteration of with duplicates, SHA-1 hashes to evidence in
original data. not the original confirm data tamper-proof
evidence. integrity. environments.
Admissibility of Electronic Documents